A web application includes user input in a response header without sanitization. An attacker submits the following input: `%0d%0aSet-Cookie: session=attacker`. What is the likely impact?

The attacker can read the contents of the server's file system

The attacker can inject additional headers, potentially leading to response splitting or session fixation

The attacker can cause a denial of service by crashing the server

The attacker can execute arbitrary code on the server

Which of the following is the most effective mitigation against command injection?

Encoding user input with URL encoding before passing to the shell.

Running the application as an administrator to avoid permission issues.

Blacklisting dangerous characters like ; and |.

Avoiding the use of system shell commands and using safe APIs instead.

What is the best practice to prevent ORM injection?

Use raw SQL but escape all user input manually.

Disable the ORM and use direct database connections.

Use a web application firewall to block ORM requests.

Always use the ORM's parameterized query methods and avoid raw SQL.

Which of the following is a common vulnerable code pattern for command injection?

Passing user input directly to the system() function in PHP.

Using a parameterized query to access a database.

Validating user input with a whitelist of allowed characters.

Using prepared statements in Java JDBC.

What is the most effective way to prevent HTTP header injection?

Using a web application firewall to block CRLF payloads.

Disabling HTTP headers in the application.

Encoding user input in base64 before putting it in headers.

Removing or rejecting CR and LF characters from user input before it is used in headers.

GIAC Certified Incident Handler

Domain 3Objective 3

Web Application Injection Attacks GCIH Practice Questions (Page 10)

Part of the Web Application Security domain, which makes up ~25% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~24–40 in this domain), expect 8–13 from this objective — we provide 80 practice questions to prepare you well beyond it. (estimate)

80questions here

16free pages

25concepts

25 Concepts in This Objective

SQL Injection Fundamentals
SQL Injection Attack Techniques
SQL Injection Mitigation
Command Injection
Command Injection Mitigation
LDAP Injection
LDAP Injection Mitigation
XML Injection
XML Injection Mitigation
NoSQL Injection
NoSQL Injection Mitigation
ORM Injection
ORM Injection Mitigation
XPath Injection
XPath Injection Mitigation
Buffer Overflow Injection
Buffer Overflow Mitigation
Format String Injection
Format String Mitigation
HTTP Header Injection
HTTP Header Injection Mitigation
Email Header Injection
Email Header Injection Mitigation
Injection Attack Detection and Testing
Injection Attack Defense in Depth

Questions 46–50

46application · medium
A web application includes user input in a response header without sanitization. An attacker submits the following input: `%0d%0aSet-Cookie: session=attacker`. What is the likely impact?
Select an answer first
47foundation · easy
Which of the following is the most effective mitigation against command injection?
Select an answer first
48foundation · easy
What is the best practice to prevent ORM injection?
Select an answer first
49foundation · easy
Which of the following is a common vulnerable code pattern for command injection?
Select an answer first
50foundation · easy
What is the most effective way to prevent HTTP header injection?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIH” is a trademark of its owner, used for identification only.